$ rpki-client -vvf rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft File: 4TxHTdRFcajO9AZpTgStasYbJWY.mft (raw, json) Hash identifier: VOkjcGvTTcS9y3tNFA1Opw4CS7LbDxgqRJgPP1SUQv4= Subject key identifier: 9E:0B:8F:F8:50:6D:85:BC:77:D9:4F:74:17:29:15:51:17:94:E5:77 Authority key identifier: E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66 Certificate issuer: /CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft Manifest number: 0130 Signing time: Sat 31 May 2025 04:13:08 +0000 Manifest this update: Sat 31 May 2025 04:13:08 +0000 Manifest next update: Sat 07 Jun 2025 04:13:08 +0000 Files and hashes: 1: 4TxHTdRFcajO9AZpTgStasYbJWY.crl (hash: n5XiUisA53oBN4Mu6ERRnmYP54XS7JioeSs8b4op6Z4=) 2: 658CF9F2721411EEAC707910C4F9AE02.roa (hash: q+T3C3H2UjoBgZcZ1La6G7C0poZwdj+81El+MVIEtoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D313, serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566 Validity Not Before: May 31 04:13:08 2025 GMT Not After : Jun 7 04:13:08 2025 GMT Subject: CN=683a81d4-d47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:39:c9:03:44:cf:38:14:b8:7a:d3:61:23:3e: 4c:69:d0:a8:41:70:a4:b4:69:53:5c:36:57:f5:5a: 59:23:95:67:10:d5:92:7c:8c:5e:d5:cd:71:73:ed: 4c:0c:0c:ae:13:92:45:9f:80:56:ba:8c:f7:0b:c2: 32:00:0e:3d:cc:c9:04:4c:b9:94:d4:cb:00:06:3a: 77:cf:ea:c2:e5:8e:99:6b:e5:33:c9:db:c4:d9:9a: 8e:01:43:78:01:1b:c7:7f:9c:81:9c:b6:00:c8:ff: 7f:f1:bb:e7:ef:ec:a4:4f:c6:68:5a:53:ca:ef:12: d7:e7:3b:9b:c5:41:69:cd:0b:39:d0:50:fc:6a:f6: 46:b6:f2:9d:99:ab:ad:db:9d:fc:9f:1f:35:50:c7: 5f:0e:9b:69:cc:4e:85:4a:42:6c:7f:5c:e2:b9:ad: 03:a4:ab:1c:0c:d2:b0:60:12:83:03:b6:e8:f8:65: ae:32:70:25:14:b5:d3:25:1e:dd:a9:07:ec:ad:07: b3:b7:d3:97:85:be:55:15:97:a1:90:40:84:0c:94: 93:c0:72:1f:29:60:80:95:99:50:5f:80:4f:5e:95: 60:d0:b6:71:d1:85:0b:c0:84:12:4f:ed:e5:1a:ba: 93:62:1d:11:92:63:9d:29:00:fc:1e:a1:8c:6d:7e: ee:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0B:8F:F8:50:6D:85:BC:77:D9:4F:74:17:29:15:51:17:94:E5:77 X509v3 Authority Key Identifier: keyid:E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:bf:79:b4:45:3b:ed:94:84:85:b2:1e:5f:bb:12:42:f2:29: 7e:bc:3c:45:00:7e:a5:e2:40:b4:a1:b1:2f:cd:f3:cc:95:2e: 62:99:66:68:eb:b8:eb:a9:4b:5f:df:78:19:96:3b:04:7f:74: 80:bd:c7:a4:35:c4:86:d6:ea:78:0a:c2:df:f9:6d:c7:a6:95: 6e:2b:9d:9c:ae:f6:97:b1:4d:1c:f7:31:cd:da:25:9d:05:05: a1:61:ee:72:38:81:f5:20:fc:86:af:95:82:f0:81:bc:ef:73: 6f:eb:bb:8a:ea:b5:e9:a5:e9:a5:db:dc:b3:ce:80:74:48:7b: f1:0b:de:9d:c2:f5:2b:79:95:30:2d:49:03:24:81:45:c7:72: ac:e8:45:e2:e4:f1:3d:3d:0e:2d:7d:f3:11:d7:22:7d:a4:af: e5:27:bf:53:78:a2:45:37:b7:44:93:95:78:8f:2c:8a:40:ed: 6c:0a:ed:f3:f0:1f:0e:e4:15:22:70:c1:c3:76:cd:d4:81:94: fa:5a:2f:a5:3c:6a:86:34:9b:5c:62:3a:da:6a:f5:2c:34:0a: b6:7f:2e:9d:05:bf:26:54:27:cc:af:e2:d2:23:5c:31:8d:45: 2f:5c:ca:42:82:e8:d2:06:2a:1c:71:16:29:11:59:12:5b:fa: 9e:70:43:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzMTMxMTAvBgNVBAUTKEUxM0M0NzRERDQ0NTcxQThDRUY0MDY2OTRFMDRBRDZB QzYxQjI1NjYwHhcNMjUwNTMxMDQxMzA4WhcNMjUwNjA3MDQxMzA4WjAYMRYwFAYD VQQDEw02ODNhODFkNC1kNDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4znJA0TPOBS4etNhIz5MadCoQXCktGlTXDZX9VpZI5VnENWSfIxe1c1xc+1M DAyuE5JFn4BWuoz3C8IyAA49zMkETLmU1MsABjp3z+rC5Y6Za+UzydvE2ZqOAUN4 ARvHf5yBnLYAyP9/8bvn7+ykT8ZoWlPK7xLX5zubxUFpzQs50FD8avZGtvKdmaut 2538nx81UMdfDptpzE6FSkJsf1ziua0DpKscDNKwYBKDA7bo+GWuMnAlFLXTJR7d qQfsrQezt9OXhb5VFZehkECEDJSTwHIfKWCAlZlQX4BPXpVg0LZx0YULwIQST+3l GrqTYh0RkmOdKQD8HqGMbX7uGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4Lj/hQ bYW8d9lPdBcpFVEXlOV3MB8GA1UdIwQYMBaAFOE8R03URXGozvQGaU4ErWrGGyVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDMxMy8wRjIwNzk3NjZF RjUxMUVFODREQTY5ODJDNEY5QUUwMi80VHhIVGRSRmNhak85QVpwVGdTdGFzWWJK V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRUeEhUZFJGY2FqTzlBWnBUZ1N0YXNZYkpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDMxMy8wRjIwNzk3NjZFRjUxMUVFODREQTY5ODJDNEY5QUUwMi80VHhIVGRSRmNh ak85QVpwVGdTdGFzWWJKV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIv3m0RTvtlISFsh5fuxJC8il+vDxFAH6l4kC0obEvzfPMlS5imWZo 67jrqUtf33gZljsEf3SAvcekNcSG1up4CsLf+W3HppVuK52crvaXsU0c9zHN2iWd BQWhYe5yOIH1IPyGr5WC8IG873Nv67uK6rXppeml29yzzoB0SHvxC96dwvUreZUw LUkDJIFFx3Ks6EXi5PE9PQ4tffMR1yJ9pK/lJ79TeKJFN7dEk5V4jyyKQO1sCu3z 8B8O5BUicMHDds3UgZT6Wi+lPGqGNJtcYjraavUsNAq2fy6dBb8mVCfMr+LSI1wx jUUvXMpCgujSBioccRYpEVkSW/qecEPZ -----END CERTIFICATE-----Generated at Sat May 31 17:46:25 2025 by rpki-client